The intent there is people on desktops are supposed to scan a verification QR code with a Google or Apple device, and basically tie their desktop to their Google or Apple device with this new reCAPTCHA.
Thankfully alternatives like Altcha, Anubis, and go-away, which are open-source and self-hosted, and platform-agnostic exist, but it'll be an uphill battle to get anything other than Fediverse or Invidious instances using those.
Cloudflare is about as bad, and the alarming thing is, Lemmy instances in particular tend to use that a lot when Altcha, Anubis, and go-away exist for if you must have a captcha of some kind.
If a hostile government doesn't like a given site, they could just have Cloudflare block it, where the self-hosted captchas I just mentioned don't necessarily have that problem.
Like, a Fediverse instance using Cloudflare, which is going against their best interest when the Fediverse is supposed to be an open and decentralized platform that's somewhat censorship-resistant, is really stupid when you got three open and self-hosted captcha alternatives you can use instead if you absolutely need a captcha. Using Cloudflare for this is opening the door for censorship of your instance if a hostile government suddenly decides your instance needs to be blocked.
As for Google reCAPTCHA, there's an even worse hypothetical I thought of than what is already on the table: Couldn't Google build a stripped-down version of Play Integrity into Chrome specifically for passing their captchas, and effectively lock most of the web into Chrome on desktops regardless of OS because vanilla Chromium and other Chromium forks and the FF browsers, and other alternative browsers such as Servo, Ladybird, or Safari, wouldn't have that stripped-down Play Integrity that Chrome would hypothetically have and thus wouldn't be able to pass Google's captchas if they actually pulled that?
The intent there is people on desktops are supposed to scan a verification QR code with a Google or Apple device, and basically tie their desktop to their Google or Apple device with this new reCAPTCHA.
Thankfully alternatives like Altcha, Anubis, and go-away, which are open-source and self-hosted, and platform-agnostic exist, but it'll be an uphill battle to get anything other than Fediverse or Invidious instances using those.
Jesus christ I hate google
Cloudflare is about as bad, and the alarming thing is, Lemmy instances in particular tend to use that a lot when Altcha, Anubis, and go-away exist for if you must have a captcha of some kind.
If a hostile government doesn't like a given site, they could just have Cloudflare block it, where the self-hosted captchas I just mentioned don't necessarily have that problem.
Like, a Fediverse instance using Cloudflare, which is going against their best interest when the Fediverse is supposed to be an open and decentralized platform that's somewhat censorship-resistant, is really stupid when you got three open and self-hosted captcha alternatives you can use instead if you absolutely need a captcha. Using Cloudflare for this is opening the door for censorship of your instance if a hostile government suddenly decides your instance needs to be blocked.
As for Google reCAPTCHA, there's an even worse hypothetical I thought of than what is already on the table: Couldn't Google build a stripped-down version of Play Integrity into Chrome specifically for passing their captchas, and effectively lock most of the web into Chrome on desktops regardless of OS because vanilla Chromium and other Chromium forks and the FF browsers, and other alternative browsers such as Servo, Ladybird, or Safari, wouldn't have that stripped-down Play Integrity that Chrome would hypothetically have and thus wouldn't be able to pass Google's captchas if they actually pulled that?